CVE-2021-4247

ALTO 7.5CVE-2021-4247 · Published 18/12/2022 · updated 17/06/2026

In breve

CVE-2021-4247 è una vulnerabilità ALTO (CVSS 7.5) che riguarda nodegoat (owasp).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.1%, superiore al 65.0% delle vulnerabilità.
Correzione: aggiornare a 2021-01-26 o successiva.

Package	Affected versions	Patched versions
nodegoat owasp	`< 2021-01-26`	`2021-01-26`

Description

A vulnerability has been found in OWASP NodeGoat and classified as problematic. This vulnerability affects unknown code of the file app/routes/research.js of the component Query Parameter Handler. The manipulation leads to denial of service. The attack can be initiated remotely. The name of the patch is 4a4d1db74c63fb4ff8d366551c3af006c25ead12. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-216184.

References

OWASP/NodeGoat commit 4a4d1db · Patch
OWASP/NodeGoat · Exploit
vuldb.com · Permissions Required

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free